Personal Data Act (personopplysningsloven)
What is Personal Data Act (personopplysningsloven)?
Norwegian Personal Data Act (personopplysningsloven) implementing the EU GDPR. It comprises 8 controls organised across 8 domains, and applies in Norway.
How Personal Data Act (personopplysningsloven) maps to other frameworks
All 8 controls, each one mapped to the equivalent requirement in other standards, with the evidence that carries across and the mappings that were judged and rejected shown alongside. No account needed to look.
See the control mappings →The 8 domains Personal Data Act (personopplysningsloven) groups its controls into
Frameworks that share controls with Personal Data Act (personopplysningsloven)
Each of these has at least one control mapped to a control in Personal Data Act (personopplysningsloven). The number is how many Personal Data Act (personopplysningsloven) controls are shared, counted from the mapping graph.
Implementation guides for frameworks that overlap Personal Data Act (personopplysningsloven)
Where Personal Data Act (personopplysningsloven) overlaps with the standards you already hold
What Personal Data Act (personopplysningsloven) means in your sector
What Personal Data Act (personopplysningsloven) means for your job
Questions people ask about Personal Data Act (personopplysningsloven)
What is Personal Data Act?
How many controls does Personal Data Act have?
Where does Personal Data Act apply?
What frameworks does Personal Data Act map to?
How do I get started with Personal Data Act compliance?
Query Personal Data Act (personopplysningsloven) programmatically
Personal Data Act (personopplysningsloven), its 8 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.
Personal Data Act (personopplysningsloven) API reference and MCP config →What Personal Data Act (personopplysningsloven) requires, control by control
Each page carries the requirement text for one Personal Data Act (personopplysningsloven) control and what an assessor expects to see as evidence.
- NORWAY-2 Data Subject Rights and Automated Decision-Making
- NORWAY-4 DPIA, Privacy by Design, Records of Processing
- NORWAY-5 Security of Processing, Encryption, Pseudonymization, Access Control
- NORWAY-6 International Transfers and Processor Agreements
- NORWAY-7 DPO, Cooperation with Datatilsynet, Retention, Marketing, Training
- NORWAY-8 Breach Notification, Complaints, Compliance, Enforcement
How ready are you for Personal Data Act (personopplysningsloven)?
Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.